cmd/go 安全漏洞

🗓️ 10 Feb 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Go tool vulnerability before 1.16.14 and 1.17.x before 1.17.7 may misinterpret branch names as version markers, risking access control.

Reporter	Title	Published	Views	Family All 167
IBM Security Bulletins	Security Bulletin: Potential module resolution error in DataPower Operator	17 Jun 202221:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to a variety of issues due to 3rd party software	27 Sep 202417:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	21 Mar 202323:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Celery, Golang Go, and Python affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift	12 Mar 202203:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, OpenSSL, Golang Go, and Zlib may affect IBM Spectrum Protect Plus	17 Sep 202206:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to incorrect access control in Golang Go (CVE-2022-23773)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to Go CVE-2022-23773	8 Apr 202214:47	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to attack under error due to Go CVE-2022-23773	5 May 202214:40	–	ibm

Source	Link
security	www.security.gentoo.org/glsa/202208-02
security	www.security.netapp.com/advisory/ntap-20220225-0006/
groups	www.groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
oracle	www.oracle.com/security-alerts/cpujul2022.html
auscert	www.auscert.org.au/bulletins/ESB-2022.3976
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022070541
auscert	www.auscert.org.au/bulletins/ESB-2022.2900
auscert	www.auscert.org.au/bulletins/ESB-2023.3143
packetstormsecurity	www.packetstormsecurity.com/files/168141/Red-Hat-Security-Advisory-2022-6094-01.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022072210

23 May 2026 00:00Current

8High risk

Vulners AI Score8

CVSS 25

CVSS 3.17.5

EPSS0.00118

go command tool security vulnerability branch names version markers access control